Extreme X670V Configuration

Cloud Execution Environment

1	Introduction
1.1	Prerequisites
2	Prepare to Configure Extreme X670V Switches
3	Configuration of Extreme X670V Switches
3.1	Configuration of Traffic Switch
3.2	Configuration of Storage Switch
Reference List

1 Introduction

This document describes procedures for how to install Extreme X670V Switches to be used as Traffic and Storage Switches.

1.1 Prerequisites

This section describes the prerequisites which must be fulfilled before the Extreme switches can be configured.

The address variables used in the document IP and VLAN Plan, Reference [2] are used throughout this document, and are summarized in the table below. The IP address <TFTP Server Address> is that of the kickstart or LCT server, obtained during the preparation process, described in the documents SW Installation in Multi-Server Deployment and SW Installation in Single Server Deployment.

Network/VLAN	IPv4 Address Variable
fuel_ctrl_sp (admin)	`<TFTP Server Address>`
cee_ctrl_sp	`<Traffic_switch_A (static)>`
cee_ctrl_sp	`<Traffic_switch_B (static)>`
cee_ctrl_sp	`<Storage_switch_A (static)>`
cee_ctrl_sp	`<Storage_switch_B (static)>`

1.1.2 Hardware and Software Required

1.1.3 Tools

The following tools are required:

Figure 1 Extreme X670V Switch, Front

1.1.4 Conditions

Before the installation can be performed, the following conditions must apply:

2 Prepare to Configure Extreme X670V Switches

This section describes the preparations needed before Extreme switches are configured.

To prepare for the installation, perform the following:

Download the needed software packages from http://www.extremenetworks.com/partners/partners-hub.aspx.
Note:
Serial number of Extreme Switch is required to download the software.
Create a folder for Extreme software on for the TFTP server:
Folder for Extreme software used in this document is <TFTP Boot server directory>/Extreme/
Copy the extracted software to the folder created, make sure that the software is accessible.

3 Configuration of Extreme X670V Switches

The Extreme switch configuration covered in this section is a manual procedure, taking each switch in turn.

If there is one pair of X670V switches, then:

Follow Step 1 in Section 3.1 to Step 30 in Section 3.1 in Section 3.1, for Switch A
Follow Step 2 in Section 3.1 to Step 32 in Section 3.1 in Section 3.1, for Switch B

If there are two pairs of X670V switches, then:

Follow Step 1 in Section 3.1 to Step 30 in Section 3.1 in Section 3.1, for Traffic Switch A
Follow Step 2 in Section 3.1 to Step 32 in Section 3.1 in Section 3.1, for Traffic Switch B
Follow Step 1 in Section 3.2 to Step 30 in Section 3.2 in Section 3.2, for Storage Switch A
Follow Step 2 in Section 3.2 to Step 31 in Section 3.2 in Section 3.2, for Storage Switch B

Note:: Configuration must be done in the steps described in this document, to avoid creating a loop in the network.

3.1 Configuration of Traffic Switch

Configure the switch:

Identify the switch having a tag name attached to it (one of the alternatives below):

Switch

Tag Name

A

<CEE Region Name>_TRAFFIC_SWA_X670V

B

<CEE Region Name>_TRAFFIC_SWB_X670V
Connect USB-to-RS-232 and RJ45-to-RS-232 to console port.
Note:
See Figure 1 for location of port.
Remove the cable from the management port if the cable was already connected. Connect the kickstart server to the Extreme switch using the Ethernet cable.
Note:
See Figure 1 for location of port.
Access the switch from console port.
If username and password are requested, continue with Step 6, otherwise go to Step 8.
Check if file default.xsf exists.
ls default.xsf

If output contains ls: default.xsf: No such file or directory continue with Step 7 .

Rename default.xsf.

mv default.xsf default.xsf.old

Rename file default.xsf to file default.xsf.old on switch? (y/N)

Enter Yes.
Unconfigure switch:
unconfigure switch all

Restore all factory defaults and reboot? (y/N)

Enter Yes

Reboot can take about five minutes.

After reboot , when the authentication service text Authentication Service (AAA) on the master node is now available for login. is displayed:

Enter admin as user.

Enter no password.
Set default configuration
This switch currently has all management methods enabled for convenience reasons. Please answer these questions about the security settings you would like to use. Telnet is enabled by default. Telnet is unencrypted and has been the target of security exploits in the past. Would you like to disable Telnet? [y/N]:

Enter Yes

SNMP access is enabled by default. SNMP uses no encryption, SNMPv3 can be configured to eliminate this problem. Would you like to disable SNMP? [y/N]:

Enter No

All ports are enabled by default. In some secure applications, it maybe more desirable for the ports to be turned off. Would you like unconfigured ports to be turned off by default? [y/N]:

Enter Yes

Changing the default failsafe account username and password is highly recommended. If you choose to do so, please remember the username and password as this information cannot be recovered. Would you like to change the failsafe account username and password now? [y/N]:

Enter No

Would you like to permit failsafe account access via the management port? [y/N]:

Enter No

The following text will be shown for firmware later than EXOS version 15.4.2.8:

The switch can proactively attempt to send basic configuration and operational switch information for the purpose of assisting technical support to resolve customer-reported issues. Uploaded data is encrypted if the ssh.xmod is installed. Otherwise, a reduced switch data set is sent in clear text that contains no customer-specific information. Would you like to disable the automatic switch reporting service? [Y/n]:

Enter Yes

Since you have chosen less secure management methods, please remember to increase the security of your network by taking the following actions: * change your admin password * change your failsafe account username and password * change your SNMP public and private strings * consider using SNMPv3 to secure network management traffic

Note:
Do not change the admin password, later steps expects empty password.
List installed versions.
The following printout is an example that shows the OS and modules installed with version. Check the version on the actual printout against the BOM for Certified HW Configurations, Reference [1]. If this version is correct, go to Step 20

show version images

Card Partition Installation Date Version Name Branch ------------------------------------------------------------------------------ Switch primary Fri Jan 23 14:04:50 UTC 2015 15.6.1.4 summitX-15.6.1.4.xos v1561b4 Switch primary Fri Jan 23 14:06:05 UTC 2015 15.6.1.4 summitX-15.6.1.4-ssh.xmod v1561b4 Switch secondary Fri Jan 23 14:09:42 UTC 2015 15.6.1.4 summitX-15.6.1.4.xos v1561b4 Switch secondary Fri Jan 23 14:10:56 UTC 2015 15.6.1.4 summitX-15.6.1.4-ssh.xmod v1561b4
Configure temporary management IP address. Perform one of the following commands, depending on which switch is being configured:

Switch

Command

A

configure vlan mgmt ipaddress <Traffic_switch_A (static)> <Netmask fuel_ctrl_sp

B

configure vlan mgmt ipaddress <Traffic_switch_B (static)> <Netmask fuel_ctrl_sp

For example, type the following:

configure vlan mgmt ipaddress 192.168.2.2 255.255.255.0
Install OS.
Transfer the image from TFTP server to Extreme X670V switch:

download image <TFTP Server Address> Extreme/summitX-<Version Name>.xos VR-mgmt

Do you want to install image after downloading?

Enter Yes.
Install SSH module.
Transfer the image from kickstart server to the Extreme X670V switch:

download image <TFTP Server Address> Extreme/summitX-<Version Name>-ssh.xmod VR-mgmt

Do you want to install image after downloading?

Enter Yes.
Save configuration.
save configuration primary

No default configuration database has been selected to boot up the system. Save configuration will set the new configuration as the default database. The configuration file primary.cfg already exists. Do you want to save configuration to primary.cfg and overwrite it? (y/N)

Enter Yes.
Reboot switch.
Reboot the switch to use the new OS:

reboot

Are you sure you want to reboot the switch? (Y/N)

Enter Yes.

Reboot can take about five minutes.
Log on by console.
After reboot, when the authentication service is restarted, the text Authentication Service (AAA) on the master node is now available for login. is displayed:

Enter admin as user.

Enter no password.
Install OS on second partition.
Transfer the image from TFTP server to Extreme X670V switch:

download image <TFTP Server Address> Extreme/summitX-<Version Name>.xos VR-mgmt secondary

Do you want to install image after downloading?

Enter Yes.
Install SSH module on second partition.
Transfer the image from kickstart server to the Extreme X670V switch:

download image <TFTP Server Address> Extreme/summitX-<Version Name>-ssh.xmod VR-mgmt secondary

Do you want to install image after downloading?

Enter Yes.
Change used partition.
use image primary
Remove temporary management IP address configured in Step 10.
unconfigure vlan mgmt ipaddress
Configure default VLAN:
configure vlan default delete ports all

Switch	Tag Name
A	`<CEE Region Name>_TRAFFIC_SWA_X670V`
B	`<CEE Region Name>_TRAFFIC_SWB_X670V`

Switch	Command
A	`configure vlan mgmt ipaddress <Traffic_switch_A (static)> <Netmask fuel_ctrl_sp`
B	`configure vlan mgmt ipaddress <Traffic_switch_B (static)> <Netmask fuel_ctrl_sp`

Create CEE administration VLAN.

create vlan cee_ctrl_sp tag 2

Perform one of the following commands, depending on which switch is being configured:

Switch	Command
A	`configure vlan cee_ctrl_sp ipaddress <Traffic_switch_A (static)> <netmask for cee_ctrl_sp>`
B	`configure vlan cee_ctrl_sp ipaddress <Traffic_switch_B (static)> <netmask for cee_ctrl_sp>`

configure vlan cee_ctrl_sp add ports 48 tagged

Enable port.
enable ports 48
Set system name. Perform one of the following commands, depending on which switch is being configured:

Switch

Command

A

configure snmp sysName <CEE Region name>_TRAFFIC_SWA_X670V

B

configure snmp sysName <CEE Region name>_TRAFFIC_SWB_X670V
Enable HTTP.
enable web http
Save configuration.
save configuration primary

Do you want to save configuration to primary.cfg and overwrite it? (y/N)

Enter Yes.

save configuration secondary

The configuration file secondary.cfg already exists. Do you want to save configuration to secondary.cfg and overwrite it? (y/N)

Enter Yes.

Saving configuration on master ...... done! Configuration saved to secondary.cfg successfully. The current selected default configuration database to boot up the system (primary.cfg) is different than the one just saved (secondary.cfg). Do you want to make secondary.cfg the default database? (y/N)

Enter No.
Reboot the switch.
reboot

Are you sure you want to reboot the switch? (Y/N)

Enter Yes.

Reboot can take about five minutes.
End console port session
Remove console port cable inserted in Step 2.
Remove Ethernet cable and reinsert cable that was removed in Step 3.
If you have followed the steps for Switch A, go to Step 2 for Switch B.
If you have configured Switch B in a one-pair configuration, go to Step 32 in Section 3.2 in Section 3.2. Otherwise continue if there are four switches.
Go to Section 3.2.

3.2 Configuration of Storage Switch